33d90e24fa71018e27003556711cfbd0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33d90e24fa71018e27003556711cfbd0_JaffaCakes118
Size

51KB
MD5

33d90e24fa71018e27003556711cfbd0
SHA1

f69a01d063ff98c3aac01d171a397ce1cbd3a75f
SHA256

e25e174dc10e0ba49a0603eb3411162f02cc93f9356b0aafc4e6e4c4342ed462
SHA512

f13d511828017dc79faa86e4ea314931779b46a0fd40ef658cae65be6361557e0d945ef40c9fc476c4d112df12d367f3d5f6d07e47d8a5ae2cc089c452f9fc0f
SSDEEP

768:ejyGIgOqxgf+LzjYTM+t74zOtVIxTiRpGXcWP9zAYJMyVMhClTB:ejNzxc+DYTMy4zOtQTiRpGXFzAYj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33d90e24fa71018e27003556711cfbd0_JaffaCakes118

Files

33d90e24fa71018e27003556711cfbd0_JaffaCakes118
.dll windows:5 windows x86 arch:x86

1f61fe8e8af19bce962645bf30fe7fac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlCreateFromPathA
UrlCombineW
UrlGetLocationW

user32

TranslateMessage
SendMessageA
MessageBeep
DialogBoxIndirectParamA
MessageBoxW
GetDC
DispatchMessageW

advapi32

RegCloseKey

Sections

.text
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Y
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ